boxlang-miniserver

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a documentation resource for the BoxLang MiniServer, an official component from Ortus Solutions. It contains no executable scripts or malicious logic.
  • [COMMAND_EXECUTION]: The skill describes the use of the boxlang-miniserver binary and associated CLI flags (e.g., --port, --webroot). These are standard operational commands for the intended use case of managing a web server.
  • [CREDENTIALS_UNSAFE]: While the skill mentions .env files and environment variables like API_KEY, these are provided as illustrative examples and best-practice placeholders for developers. The documentation explicitly notes that the server includes security features to prevent public HTTP access to these sensitive files.
  • [SAFE]: The skill documents security features such as hidden file protection (blocking files starting with a dot) and masking system details in health check endpoints when accessed remotely.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 02:43 PM